I don't work in our AD group and I am seeking config info for Bitlocker...
We have an OU into which we can image, a policy-free OU that allows our pc's to join to our domain.
There is a separate OU for Bitlocker, which, today, we manually move a pc into and then kick off BL encryption.
I'm asking our AD group to mirror the Bitlocker policy which is on the Bitlocker OU to be the same as the policy-free OU.
My goal is to run encryption during MDT cloning.
The issue, obviously, is that we "either" place the pc in the policy-free OU in order for MDT to complete, but THEN move it to Bitlocker OU for encryption.
Is there any info I can give to our AD group to help them get the same BL policy to apply onto the policy-free OU?
All I need is to be able to encrypt in the open OU and see the key, as I can in the designated Bitlocker OU. I don't know what to tell them since I don't work in AD, but whatever it is, they can apply to a test OU for now.
Thanks